An attacker came close to exploiting a maximum-severity flaw. Here's what to know.